denial of service or unclassified availability attack Estimated start: Date confidence: Low

Intento de interrupción reportado contra resultadosconvzla.com

Un intento de afectar resultadosconvzla.com durante la discusión de la OEA del 31 de julio de 2024 habría sido mitigado sin derribar el sitio, según el Comando Con Venezuela al día siguiente. Su captura de Cloudflare muestra 44,89 millones de solicitudes totales, 43,91 millones mitigadas por WAF, 977,54 mil servidas por Cloudflare y 73 por el origen. No identifica DDoS, un periodo completo de 24 horas ni valida las 32 millones de consultas declaradas; las solicitudes no equivalen a ataques individuales. VE sin Filtro documentó por separado restricciones DNS y HTTP(S) de proveedores venezolanos. Ese bloqueo no prueba el intento de tráfico ni un impacto causado por él. Actor, método y compromiso de datos no están establecidos.

Overview

Missing evidence

exportación original y rango temporal completo del panel Cloudflaredefinición o desglose que distinga solicitudes WAF, bots, abuso y DDoStelemetría independiente del tráfico y del estado del origen durante el intentovalidación separada de las 32 millones de consultas declaradasactor u origen técnico del tráficocualquier degradación o indisponibilidad causada por el tráfico

Impact details

El Comando Con Venezuela afirmó que el tráfico fue mitigado y no derribó el sitio. No se documentan caída causada por el tráfico, degradación, usuarios afectados, acceso al origen, alteración ni exposición de datos. El bloqueo DNS/HTTP(S) documentado por VE sin Filtro se conserva como contexto separado y no se atribuye como impacto de este intento.

sitio web público de resultados electorales resultadosconvzla.com

Classification & severity

Category
Availability
Subtype
denial of service or unclassified availability attack
Confidence
Medium

La fuente primaria y su captura respaldan un reporte de solicitudes masivas mitigadas por Cloudflare WAF. No permiten afirmar DDoS, volumen único malicioso, actor ni interrupción: el propio comando dijo que no pudieron derribar el sitio. El bloqueo por ISP documentado por VE sin Filtro es contexto separado y no se usa como prueba de este ataque.

Severity assessment

Low
Functional impact
None
Information impact
None
Affected scope
Organization-wide
Critical service
None
Public confidence
Limited

La víctima afirmó que la mitigación mantuvo el sitio público y accesible. No se documentó impacto operativo causado por el tráfico, pérdida de datos, funciones críticas afectadas, duración ni costo. La relevancia política del portal y el bloqueo por ISP separado no sustituyen impacto demostrado de este intento.

Timeline

Publication

María Corina Machado publicó el enlace a resultadosconvzla.com como portal de consulta de resultados y actas electorales.

Discovery

VE sin Filtro documentó bloqueo selectivo de resultadosconvzla.com por proveedores venezolanos. Su actualización del 31 de julio identifica DNS y HTTP(S), proveedores y horas de nuevas restricciones.

Other

Según el Comando Con Venezuela, durante la discusión de la OEA terceros intentaron afectar el sitio. La fuente no da hora exacta; la captura muestra una ráfaga de solicitudes mitigadas por WAF y el comando afirma que el sitio no cayó.

Disclosure

@ConVzlaComando informó más de 32 millones de consultas y más de 44 millones de ataques mitigados, dijo que no derribaron el sitio y adjuntó el panel de Cloudflare.

Evidence & sources

9 sources
Corroborating Media report Source confidence: Medium

What this source supports

  • the article repeats Comando Con Venezuela's statement that more than 44 million attacks were mitigated while the site remained public and accessible
  • it attributes the alleged traffic window to the 31 July OAS discussion but supplies no independent measurement or actor identity
  • its incident image reproduces the exact victim post and the same Cloudflare panel showing 44.89M total and 43.91M WAF-mitigated requests
  • the page's real publication date is 3 August, not the 1 August date inferred from its URL

Evidence limits

Secondary repetition of the victim statement. The screenshot does not identify DDoS, reveal the complete dashboard time range, expose raw data or establish a service outage.

Relevance to this case

Preserves a contemporary media reproduction of the primary statement and screenshot; useful for provenance, not independent technical confirmation.

Corroborating Media report Source confidence: Medium

What this source supports

  • the article accurately attributes the 44-million figure, 32-million-query figure and assertion that the site stayed accessible to Comando Con Venezuela's X account
  • it reproduces the same Cloudflare image, whose visible figures are 44.89M total, 43.91M mitigated by WAF, 977.54K served by Cloudflare and 73 served by origin
  • it separately cites VE sin Filtro's report that Venezuelan ISPs blocked the site
  • it provides no independent WAF telemetry, DDoS classification, attacker attribution or attack-caused outage

Evidence limits

The article preserves the first-party claim and image but does not validate the dashboard, distinguish malicious requests from DDoS, or observe a traffic-caused outage.

Relevance to this case

Contemporaneous Venezuelan reproduction of the victim statement and separate ISP-blocking context.

Corroborating Media report Source confidence: Medium

What this source supports

  • the article repeats the victim statement and embeds exact X status 1819008814005264884
  • the embedded post visibly says the site remained public and accessible despite the attempted interference
  • its attached Cloudflare panel supports the displayed WAF totals but does not label the event DDoS or expose raw logs
  • the article adds no independent observation of traffic, attack attribution or service disruption

Evidence limits

Derivative report of the same victim post. It does not independently verify the traffic, method, actor or effects.

Relevance to this case

Useful because it preserves and directly embeds the exact primary post; no additional technical corroboration.

What this source supports

  • the article independently observed the public resultadosconvzla.com platform and described its election-results purpose on 31 July
  • it says María Corina Machado publicly linked the platform and reports the visible tally figures at publication
  • it predates the 1 August traffic statement and says nothing about 44 million requests, WAF mitigation, DDoS or ISP blocking

Evidence limits

Strong context for the platform and its availability before the reported event, but no incident-specific evidence.

Relevance to this case

Establishes the target, public purpose and pre-event availability; cannot support attack type or impact.

Context Security research Source confidence: High

What this source supports

  • VE sin Filtro reports that resultsconvzla.com and two related election-results domains were blocked by major Venezuelan Internet providers using multiple techniques
  • its resultsconvzla.com infographic marks the block as beginning 30 July and lists DNS and HTTP/HTTPS mechanisms
  • its exact 31 July update says CANTV, Digitel and CableNorte joined earlier blocking by Movistar, Inter and NetUno and gives technique/time details
  • the report documents selective network interference, not the separate WAF traffic claim, DDoS or attacker identity

Evidence limits

The organizational report gives techniques and provider scope but not raw probe files in the article. It does not identify who ordered the blocking or connect it causally to the WAF traffic.

Relevance to this case

Strongest independent technical evidence for the confirmed availability effect: selective ISP blocking inside Venezuela.

What this source supports

  • the article documents the public launch/link of resultadosconvzla.com on 30 July and embeds the exact María Corina Machado post
  • the exact post contains the domain and election-results purpose but no attack, blocking or technical claim
  • the article inconsistently writes 81.21 percent in the title and 82.21 percent in the body, while the exact post itself supplies no percentage

Evidence limits

Context-only launch report with an internal percentage discrepancy; no incident evidence.

Relevance to this case

Establishes the target launch and public ownership before the traffic and blocking events.

Primary Social media Source confidence: High

What this source supports

  • the verified campaign account says third parties tried to affect resultadosconvzla.com during the previous day's OAS discussion but failed and the site remained public and accessible
  • it says the site had more than 32 million consultations and mitigated more than 44 million attacks in its first 24 hours
  • the attached Cloudflare panel visibly shows 44.89M total, 43.91M mitigated by WAF, 977.54K served by Cloudflare and 73 served by origin
  • the post and image support first-party claim provenance and a WAF event, but do not identify DDoS, an actor, a complete 24-hour graph or service disruption

Evidence limits

First-party screenshot rather than raw export. The visible WAF category and totals do not by themselves establish DDoS, malicious uniqueness, a 24-hour interval, human consultations, actor identity or an outage.

Relevance to this case

Strongest primary source for the exact traffic claim, explicit absence of attack-caused downtime and attached WAF evidence.

Context Security research Source confidence: High

What this source supports

  • the exact post says Movistar, Inter and NetUno were already blocking resultadosconvzla.com and that CANTV, Digitel and CableNorte joined on 31 July
  • it specifies CANTV HTTPS plus DNS at 00:30, Digitel DNS at 12:30 and CableNorte DNS at 15:30
  • the first attachment labels resultadosconvzla.com blocked via DNS, HTTPS and HTTP/HTTPS; the other three attachments concern related or unrelated domains
  • the post supports selective ISP blocking but not who ordered it or any connection to the separate WAF traffic

Evidence limits

Primary organizational measurement claim with no raw probe download exposed in the post and no order/actor attribution.

Relevance to this case

Exact contemporaneous source for provider, technique and timing details of the independently documented blocking.

María Corina Machado publicó el enlace a resultadosconvzla.com

María Corina Machado (@MariaCorinaYA) / X Jul 30, 2024
Context Social media Source confidence: High

What this source supports

  • the verified account directly published the resultadosconvzla.com link and identified it as live election-results information on 30 July
  • the post supports target ownership, purpose and launch timing
  • it contains no attack, blocking, WAF, availability or actor assertion

Evidence limits

Context only; not incident evidence.

Relevance to this case

Primary context for the target's public launch and relationship to the opposition campaign.